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Top Stories 

• Some card readers at 60 Chicago Transit Authority train stations failed for about 15 to 90 
minutes due to a server malfunction that resulted in 15,000 free rides for commuters before 
the problem was fixed. - Chicago Tribune (See item 10 ) 

• Four Marines were killed during a routine sweep to make a range safe for future training 
exercises at California’s Camp Pendleton while they were clearing unexploded ordnance. - 
Associated Press (See item 20 ) 

• A former student was arrested after he ambushed, shot, and wounded three students outside 
the Brashear High School in Pittsburgh. - Pittsburgh Tribune -Review (See item 21 ) 

• Two teams competing in the PacSec 2013 Pwn20wn competition demonstrated methods to 
compromise security and steal personal information from popular smartphones. - The 
Register (See item 30 ) 
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Energy Sector 



1. November 13, Associated Press - (South Carolina) SCE&G closes Lowcountry 
power plant. South Carolina Electric & Gas announced November 13 that its Canadys 
Station near Walterboro stopped generating electricity the week of November 4 in an 
effort to reduce emissions. 

Source: http://www.thestate.com/2013/ll/13/3095596/sceg-closes-lowcountrv-power- 
plant.html 

2. November 13, WFPL 89.3 FM Louisville - (Kentucky) LG&E agrees to pay $113,000 
for coal ash, odor violations at Cane Run Plant. Louisville Gas and Electric will pay 
$1 13,250 and continue implementing a compliance plan at Kentucky’s Cane Run 
Power Station in an agreement with the Air Pollution Control District for 10 instances 
where coal ash and odors allegedly left the plant’s property. 

Source: http://wfpl.org/post/lge-agrees-pav-113000-coal-ash-odor-violations-cane-run- 
plant 

[ Return to top ] 

Chemical Industry Sector 

Nothing to report 
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Nuclear Reactors, Materials, and Waste Sector 

3. November 14, Reuters - (International) Some spent fuel rods at Fukushima were 
damaged before 2011 disaster. The operator of the damaged Fukushima nuclear 
power plant in Japan stated in a report that three spent fuel assemblies were damaged 
prior to the 201 1 earthquake and tsunami that crippled the plant, and that the assemblies 
cannot be removed from the Unit 4 reactor using a large cask planned to be used in fuel 
removal operations. 

Source: http://www.reuters.com/article/2013/ll/14/iapan-fukushima-removal- 
idUSL4N0IZ0TR20131 1 14 

1 Return to top i 

Critical Manufacturing Sector 

4. November 13, Associated Press - (California) 3 hurt in Tesla factor hot metal spill in 
Calif. Three employees of Tesla Motors were injured November 13 at the company’s 
San Francisco Bay Area factory when an aluminum casting press failed and spilled hot 
metal. 

Source: http ://abcne w s . go .com/T echnolog y/ wireS tory/inj ured-tesla-factory-calif- 
20880798 
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Defense Industrial Base Sector 

Nothing to report 
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Financial Services Sector 

5. November 14, Krebs on Security - (California) Feds charge Calif, brothers in 
cyberheists. Federal authorities arrested and charged two brothers in Fresno with 
allegedly stealing millions of dollars by stealing login credentials of brokerage accounts 
with Fidelity Investments, setting up fraudulent automated clearing house links 
between victim accounts and accounts they controlled, and then using prepaid debit 
cards from those accounts to purchase money orders that were deposited into other 
accounts for cash withdrawals. 

Source: http://krebsonsecuritv.eom/2013/l 1/feds-charge-calif-brothers-in-cyberheists/ 

6. November 14, Tampa Bay Business Journal - (Florida) FDIC lawsuit alleges ‘high- 
risk gamble’ by directors of failed Progress Bank. The Federal Deposit Insurance 
Corporation (FDIC) filed a lawsuit against three former directors of the failed Progress 
Bank of Florida seeking $6.3 million in damages, accusing the directors of gross 
negligence and breach of fiduciary duties. The bank’s 2010 failure cost the FDIC’s 
Deposit Insurance Fund $46.8 million. 

Source: http://www.bizioumals.com/tampabay/blog/moming-edition/2013/ll/fdic- 
lawsuit-alleges-high-risk.html?page=all 

7. November 13, Sioux City Journal - (National) Police: Storm Lake man had 350 fake 
credit, gift cards. Police arrested a Storm Lake, Iowa man November 13 and charged 
him with allegedly running a nationwide credit card fraud scheme. A search of the 
man’s residence yielded 350 fraudulent payment cards, a card re-encoder, and retail 
information from around the country. 

Source: http://siouxcitviournal.com/news/local/police-storm-lake-man-had-fake-credit- 
gift-cards/article db705924-4d06-5584-90b0-e217632ffbdd.html 

8. November 13, U.S. Attorney’s Office, Eastern District of New York - (National) Two 

indicted in $15 million investment fraud scheme that victimized National Hockey 
League players and Long Island investors. Two men were arrested in Arizona and 
charged in New York City with allegedly running a $15 million investment scheme 
involving fraudulent schemes in several States that targeted National Hockey League 
players and investors in Long Island, New York. 

Source: http://www.fbi. go v/newyork/press-releases/20 1 3/two-indicted-in- 1 5 -million- 
investment- fraud-scheme-that-victimized-national-national-hockey-league-players-and- 
long-island-investors 
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9. November 13, Reuters - (New Jersey) High school pals plead guilty in NJ insider 
trading scheme. Two men in New Jersey pleaded guilty to their roles in an insider 
trading scheme that took place over 5 years and generated more than $1.7 million in 
illegal profits based. The men were the last of six men charged in November 2012 to 
plead guilty. 

Source: http://www.reuters.com/article/2013/ll/13/crime-insidertrading- 
highschoolpals-plea-idUSL2N0IYlQW20131 1 13 
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Transportation Systems Sector 

10. November 14, Chicago Tribune - (Chicago) Yentra outage hits 60 CTA stations, 
results in 15,000 free rides. Some Ventra card readers at 60 Chicago Transit Authority 
train stations failed for about 15 to 90 minutes due to a back-office server malfunction 
that resulted in 15,000 free rides for commuters before the problem was fixed 
November 13. 

Source: http://www.chicagotribune.com/news/local/breaking/chi-ventra-outage-hits-60- 
cta-stations-results-in- 15000-20 1 3 1 1 1 3,0, 1 00 1 325 . story 

11. November 13, WAFF 48 Huntsville - (Alabama) Hwy. 431 reopened after Albertville 
business fire. A fire at the old Galloway Motors building in Albertville closed U.S. 431 
traffic on northbound lanes for 3 hours and southbound lanes for 5 hours as emergency 
crews responded November 13. The cause of the fire is under investigation. 

Source: http://www.waff.com/storv/23962291/albertville-emergencv-crews-on-scene- 
of- structure-fire 
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Food and Agriculture Sector 

12. November 13, Press of Atlantic City - (New Jersey) USDA issues disaster declaration 
for South Jersey farms, citing excessive summer rains. The U.S. Department of 
Agriculture approved a disaster declaration for various counties in New Jersey that will 
give farmers access to emergency loans to recoup losses and rebuild operations after 
excessive amounts of rain, flooding and extreme weather affected summer crops. 
Source: http://www.pressofatlanticcity.com/news/breaking/usda-issues-disaster- 
declaration-for-south-jersey-farms-citing-excessive/article 26f3ad2e-4cal-lle3-bf67- 
0019bb2963f4.html 

13. November 13, KWTX 10 Waco - (Texas) Texas firm recalls raw poultry products. 
Fran’s Fryers of Milford, Texas, recalled about 250 pounds of raw poultry products 
November 13 that were produced without a Food Safety and Inspection Service 
inspection November 11. 

Source: http://www.kwtx.com/news/health/headlines/Texas-Firm-Recalls-Raw-Poultry- 
Products-231792791.html 
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14. November 13, Food Safety News - (Michigan) 15 sick with Salmonella in Michigan. 
Health officials reported a Salmonella outbreak in Muskegon County, Michigan, that 
sickened at least 15 people. Authorities are investigating the source of the outbreak. 
Source: http://www.foodsafetvnews.com/2013/ll/15-sick-with-salmonella-in- 
michigan/ 

15. November 13, U.S. Food and Drug Administration - (National) 3 Fellers LLC issues 
an allergy alert for undeclared allergen (almonds) in chocolate cream pies. 3 
Fellers LLC voluntarily recalled 3 Fellers Chocolate Cream Pies November 13 as a 
precautionary measure because the product may contain undeclared almonds. 

Source: http ://w w w .fda. go v/Safet y/Recalls/ucm374877 .htm 
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Water and Wastewater Systems Sector 

16. November 14, Associated Press - (Kansas) Kan. Ex-wastewater manager to plead 
guilty over pollution. A former wastewater manager for Hays, Kansas, filed his intent 
to plead guilty November 13 to charges of making false statements about nitrogen 
levels in the Hays wastewater treatment plant’s effluent and to filing false reports and 
lying to U.S. Environmental Protection Agency agents. 

Source: http://www.seattlepi.com/news/science/article/Kan-ex-wastewater-manager-to- 
plead-over-pollution-4982352.php 

17. November 13, KTAL 6 Texarkana - (Louisiana) Shreveport fined $650,000 by EPA; 
agrees to $342 million sewer upgrade. The U.S. Environmental Protection Agency 
and U.S. Department of Justice announced November 13 that the City of Shreveport 
agreed to spent around $342 million over 12 years to improve its sanitary sewer system 
and pay $650,000 in fines in response to illegal raw sewage discharges from the 
system. 

Source: http://www.arklatexhomepage.com/storv/shreveport-fined-650000-by-epa- 
agrees-to-342-million-sewer-upgrade/d/storv/F IFT-G4GE-yl0tuylkaEA 

18. November 13, KTRE 9 Lufkin - (Texas) San Augustine to turn off water for repairs 
to the water main. The City of San Augustine shut off water November 13 in order to 
make repairs to a 16-inch water main needed after a leak was discovered. Residents 
were advised to boil water until further notice. 

Source: http://www.ktre.com/storv/23957010/san-augustine-to-turn-off-water-for- 
repairs-to-the-water-main 
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Healthcare and Public Health Sector 



19. November 13, San Francisco Chronicle - (California) Women charged in cancer 
center identity thefts. Authorities charged two women for allegedly stealing mail and 
personal information from 15 patients at an Alta Bates Summit Medical Center breast 
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cancer center in Alameda County, and from more than 100 others in several Bay Area 
counties, that they collected through stolen mail, notebooks, and ledgers. 

Source: http ://blog . sf gate. com/crime/20 13/11/1 3/women-charged-in-cancer-center- 
identity-thefts/ 
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Government Facilities Sector 

20. November 14, Associated Press - (California) 4 Marines die during safety sweep at 
Calif, base. Four Marines were killed during a routine sweep to make a range safe for 
future training exercises at California’s Camp Pendleton while they were clearing 
unexploded ordnance. 

Source: http://news.msn.com/us/4-marines-die-during-safetv-sweep-at-calif-base 

21. November 14, Pittsburgh Tribune -Review - (Pennsylvania) 3 students shot outside 
Brashear High School. A former Brashear High School student was arrested 
November 13 after he ambushed, shot, and wounded three students outside the 
Pittsburgh school in what officials believe was a drug-related incident. 

Source: http://triblive.com/news/adminpage/5063971-74/brashear-police-avenue 

22. November 13, KOTV 6 Tulsa - (Oklahoma) 3 teens injured when Jeep collides with 
school bus in Mayes County. Three teenagers were injured after their car collided 
with an Adair High School bus November 13 in Mayes County. 

Source: http://www.newson6.com/story/23962004/school-bus-collides-with-ieep-in- 
adair-county 

23. November 13, Indianapolis Star - (Indiana) Broken circuit causes call center outages 
at State agencies. An AT&T data circuit outage caused a phone outage at 10 Indiana 
State agencies’ call centers November 13. Crews were working to repair the circuit 
while calls were rerouted around the call centers. 

Source: http://www.indvstar.com/article/20131 1 13/LOCAL 18/31 1 130057/Broken- 
circuit-causes-call-center-outages-state-agencies 

24. November 13, Albuquerque Journal - (New Mexico) Whooping cough boosters 
recommended after outbreak. Health officials encouraged students and family 
members of La Cueva High School in Albuquerque to get a Tdap booster shot after an 
outbreak of pertussis left 30 sick from the high school. 

Source: http://www.abqiournal.com/299952/news/whooping-cough-boosters- 
recommended-after-abq-outbreak.html 

25. November 13, Medford Mail Tribune - (Oregon) Explosive device detonates in front 
of Jackson County DA’s office. The Jackson County Circuit Court was closed for 
several hours November 13 after an improvised explosive device was placed in front of 
a vacant district attorney’s office causing an explosion that damaged the building’s 
interior. Authorities are investigating the incident. 

Source: 
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http://www.mailtribune.com/apps/pbcs.dll/article?AID=/20131 1 13/NEWS07/31 1 13034 
0 

26. November 12, Shippensburg News-Chronicle - (Pennsylvania; North Carolina) 
Shippensburg merchants caught in NCIS web. Authorities charged the owners of 
Weekend Warrior military surplus store in Shippensburg after an investigation 
uncovered that they knowingly received a delivery of stolen military equipment from 
Camp Lejeune, North Carolina, worth $75,000 at their store. 

Source: http://shipnc.com/articles/2013/ll/12/news/doc5282372d46076656827649.txt 

27. November 12, U.S. Department of Labor - (Michigan) U.S. Department of Labor’s 
OSHA cites Selfridge Air National Guard Base for 8 violations including exposing 
workers to amputation hazards. The Michigan National Guard-operated Selfridge 
Air National Guard Base in Harrison Township was cited with eight notices of unsafe 
or unhealthy working conditions, including one repeat amputation hazard violation, by 
the U.S. Department of Labor’s Occupational Safety and Health Administration after 
an inspection. 

Source: 

https://www.osha.gov/pls/oshaweb/owadisp.show document?p table=NEWS RELEA 
SES&p id=25074 
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Emergency Services Sector 

Nothing to report 
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Information Technology Sector 

28. November 14, Help Net Security - (International) Sinowal and Zbot trojan 
collaborate in new attack. Researchers at Trend Micro observed a variant of the 
ZeuS/Zbot trojan working in collaboration with a new Sinowal trojan to attempt to 
make ZeuS’s job easier by disabling the Trusteer Rapport security software. The two 
trojans are dropped by the Andromeda backdoor attached to malicious emails. 

Source: http://www.net-securitv.org/malware news.php?id=2626 

29. November 14, Softpedia - (International) MacRumors hacker says he will not leak 
the 860,000 passwords he stole. The MacRumors forums were hacked and 860,000 
users’ usernames, emails, and password hashes were compromised, MacRumors 
confirmed November 12. However, the hacker who took credit for the breach claimed 
that they would not reveal the information. 

Source: http://news.softpedia.com/news/MacRumors-Hacker-Says-He-Will-Not-Leak- 
the-860-000-Passwords-He-Stole-400064.shtml 
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30. November 14, The Register - (International) Pwn20wn crackers leave iOS and 
Samsung mobe security IN RUINS. Two teams competing in the PacSec 2013 
Pwn20wn competition demonstrated methods to compromise security and steal 
personal information from a Samsung Galaxy S4 running Android and an Apple device 
running iOS version 7.0.3 and iOS 6.1.4. 

Source: 

http://www.theregister.co.uk/2013/ll/14/pwn2own crackers leave ios and Samsung 
handsets wide open/ 

31. November 14, Softpedia - (International) Cybercriminals use new Linux backdoor to 
steal information from companies. Symantec researchers identified a cybercriminal 
operation that carried out an attack against a large hosting provider using a new L inux 
backdoor, dubbed Linux. Fokirtor that was able to gain access to usernames, passwords, 
emails, and possibly financial information. The backdoor hides inside server processes 
that could give the attack away and prompt security reviews. 

Source: http://news.softpedia.com/news/Cvbercriminals-Use-New-Linux-Backdoor-to- 
Steal-Information-from-Companies-400203.shtml 

32. November 14, Softpedia - (International) Remote code execution vulnerability fixed 
in BlackBerry Link. BlackBerry closed remote code execution and local privilege 
elevation vulnerabilities in its BlackBerry Link for Windows and Mac OS in a recent 
software update. 

Source: http://news.softpedia.com/news/Remote-Code-Execution-Vulnerabilitv-Fixed- 
in-BlackBerry-Link-400 1 67 . shtml 

33. November 14, Washington Post - (International) LivingSocial back online after Web 
site outage. An unspecified internal error caused LivingSocial’s Web site and mobile 
app to be inoperable for around 2 days starting November 12. The site and app were 
returned to service November 14. 

Source: http://www.washingtonpost.com/business/capitalbusiness/livingsocial-outage- 
continues-into-second-day/2013/1 !/13/ac6266c2-4c78-l Ie3-be6b- 
d3d28122e6d4 story.html 

34. November 13, Softpedia - (International) At least 100,000 Instagram users fall victim 
to InstLike scam. Symantec researchers found that at least 100,000 Instagram users 
may have fallen victim for a scam service called InstLike that promised Tikes’ and 
followers in return for providing Instagram login credentials and for buying virtual 
coins. The app was available in Google’s Play store and Apple’s App Store for several 
months and was downloaded between 100,000 and 500,000 times in the former. 

Source: http://news.softpedia.com/news/At-Least-100-00Q-Instagram-Users-Fall- 
Victim-to-InstLike-Scam-399959.shtml 

35. November 13, SC Magazine - (International) Popular humor site hosted Nuclear 
Pack exploit kit. Barracuda Labs researchers found that popular humor site 
Cracked.com was compromised as of November 10 in order to host the Nuclear Pack 
exploit kit. Exploits were then served to visitors through a malicious Javascript 
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targeting vulnerable versions of Java and Adobe Flash and PDF software. 

Source: http://www.scmagazine.com//popular-humor-site-hosted-nuclear-pack-exploit- 
kit/article/320833/ 



Internet Alert Dashboard 



To report cyber infrastructure incidents or to request information, please contact US-CERT at soc@us-cert.gov or 
visit their Web site: http://www.us-cert.gov 

Information on IT information sharing and analysis can be found at the IT ISAC (Information Sharing and 
Analysis Center) Web site: http://www.it-isac.org 
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Communications Sector 

36. November 14, Kansas City Star - (Kansas; Missouri; Oklahoma) Sprint: Service 

restored to disrupted markets. The source of a Sprint service outage that knocked out 
service to the Internet, text message exchanges, and the ability to make calls in Kansas 
City, St. Louis, and Oklahoma City was identified and service restored after more than 
5 hours November 14. 

Source: http://www.kansascity.com/2013/ll/14/4620837/sprint-network-down-in- 
kansas.html 



37. November 12, U.S. Department of Labor - (New York) US Labor Department 
reaches settlement agreement with Verizon New York Inc. to increase training, 
safeguards for field technicians. The U.S. Department of Labor’s Occupational Safety 
and Health Administration reached a settlement with Verizon New York Inc., that 
included a fine of $147,000 and requirements to provide enhanced electrical safety 
training and other safeguards for field technicians, stemming from citations issued in 
March 2012 in connection with a fatal electrocution of an employee in September 2011 
in Brooklyn. 

Source: 

https://www.osha.gov/pls/oshaweb/owadisp.show document?p table=NEWS RELEA 
SES&p id=25071 

For additional stories, see items 30 and 33 
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Commercial Facilities Sector 

38. November 14, WJZ 13 Baltimore - (Maryland) 2 dozen people evacuated after Bel 
Air fire damages 18 apartments. A 3-alarm fire displaced two dozen people from 
their homes and left 18 apartments damaged at a complex in Harford County. One 
entire building was destroyed and two next to it were damaged. 

Source: http://baltimore.cbslocal.com/2013/ll/14/2-dozen-people-evacuated-after-bel- 
air- fire-damages- 18-apartments/ 
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39. November 13, KTLA 5 Los Angeles - (California) Gas leak prompts evacuation at 
Buena Park Mall. Buena Park Downtown mall was evacuate for about 2 hours 
November 13 due to a gas leak after a contractor struck and ruptured a natural gas line. 
Crews worked to repair the break. 

Source: http://ktla.com/2013/ll/13/report-of-gas-leak-prompts-evacuation-at-buena- 
park-mall/ 

For another story, see item 23 
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Dams Sector 



40. November 12, Pennsylvania Department of Conservation and Natural Resources - 

(Pennsylvania) Pennsylvania DCNR rules out Gunter Valley Dam rehabilitation in 
Franklin County. The Pennsylvania Department of Conservation and Natural 
Resources (DCNR) announced November 12 that the Gunter Valley Dam in Fran kl in 
County will be breached after an investigation found advanced deterioration and high 
costs for rehabilitation. The lake behind the dam has been drained since 2009 to assess 
the state of the dam. 

Source: http ://w w w. sacbee.com/20 13/11/12/5 904260/penns y lvania-dcnr-rules-out- 
gunter.html 
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Department of Homeland Security (DHS) 

DHS Daily Open Source Infrastructure Report Contact Information 



About the reports - The DHS Daily Open Source Infrastructure Report is a daily [Monday through Friday] 
summary of open-source published information concerning significant critical infrastructure issues. The DHS Daily 
Open Source Infrastructure Report is archived for 10 days on the Department of Homeland Security Web site: 
http://www.dhs.gov/IPDailyReport 

Contact Information 

Content and Suggestions: Send mail to cikr.productfeedback@hq.dhs.gov or contact the DHS 

Daily Report Team at (703) 942-8590 

Subscribe to the Distribution List: Visit the DHS Daily Open Source Infrastructure Report and follow 

instructions to Get e-mail updates when this information changes . 

Removal from Distribution List: Send mail to support @ govdelivery.com . 



Contact DHS 

To report physical infrastructure incidents or to request information, please contact the National Infrastructure 
Coordinating Center at nicc@hq.dhs.gov or (202) 282-9201. 

To report cyber infrastructure incidents or to request information, please contact US -CERT at soc@us-cert.gov or visit 
their Web page at www.us-cert.gov . 

Department of Homeland Security Disclaimer 

The DHS Daily Open Source Infrastructure Report is a non-commercial publication intended to educate and inform 
personnel engaged in infrastructure protection. Further reproduction or redistribution is subject to original copyright 
restrictions. DHS provides no warranty of ownership of the copyright, or accuracy with respect to the original source 
material. 
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